# CVEs published 2019-11-01

32 CVEs were published on November 1, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-6470](https://cve.now/CVE-2019-6470.md): dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries (CVSS 6.5, Multiple, non-ISC dhcpd)
- [CVE-2005-2352](https://cve.now/CVE-2005-2352.md): I race condition in Temp files was found in gs-gpl before 8.56 addons scripts. (no CVSS, gs-gpl)
- [CVE-2013-4168](https://cve.now/CVE-2013-4168.md): Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields. (no CVSS, SmokePing)
- [CVE-2005-2351](https://cve.now/CVE-2005-2351.md): Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files. (no CVSS, mutt)
- [CVE-2013-0186](https://cve.now/CVE-2013-0186.md): Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS, ManageIQ EVM · Red Hat CloudForms)
- [CVE-2013-2255](https://cve.now/CVE-2013-2255.md): HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side (no CVSS, OpenStack Keystone · OpenStack Compute +4)
- [CVE-2019-18654](https://cve.now/CVE-2019-18654.md): A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in the Network Notifica (no CVSS)
- [CVE-2013-0180](https://cve.now/CVE-2013-0180.md): Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. (no CVSS, Redis Labs Redis)
- [CVE-2013-0178](https://cve.now/CVE-2013-0178.md): Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. (no CVSS, Redis Labs Redis)
- [CVE-2019-18653](https://cve.now/CVE-2019-18653.md): A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 i (no CVSS)
- [CVE-2013-0165](https://cve.now/CVE-2013-0165.md): cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp. (no CVSS, OpenShift mongodb cartridge)
- [CVE-2005-2350](https://cve.now/CVE-2005-2350.md): Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web us (no CVSS, websieve)
- [CVE-2010-3661](https://cve.now/CVE-2010-3661.md): TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend. (no CVSS, typo3/cms-backend)
- [CVE-2013-4367](https://cve.now/CVE-2013-4367.md): ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted (no CVSS, ovirt-engine)
- [CVE-2010-3660](https://cve.now/CVE-2010-3660.md): TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend. (no CVSS, typo3/cms-backend)
- [CVE-2013-2227](https://cve.now/CVE-2013-2227.md): GLPI 0.83.7 has Local File Inclusion in common.tabs.php. (no CVSS, INDEPNET Development Team GLPI)
- [CVE-2013-1666](https://cve.now/CVE-2013-1666.md): Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro. (no CVSS)
- [CVE-2019-12752](https://cve.now/CVE-2019-12752.md): The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow (no CVSS, Symantec SONAR Component)
- [CVE-2019-6658](https://cve.now/CVE-2019-6658.md): On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuration utility may allow a (no CVSS, F5 BIG-IP)
- [CVE-2019-6657](https://cve.now/CVE-2019-6657.md): On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed (no CVSS, F5 BIG-IP)
- [CVE-2019-15588](https://cve.now/CVE-2019-15588.md): There is an OS Command Injection in Nexus Repository Manager \<= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Ex (no CVSS, Nexus Repository Manager)
- [CVE-2012-2979](https://cve.now/CVE-2012-2979.md): FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD ser (no CVSS, nsd3)
- [CVE-2011-3923](https://cve.now/CVE-2011-3923.md): Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary (no CVSS, Apache Struts · org.apache.struts:struts2-core)
- [CVE-2005-3056](https://cve.now/CVE-2005-3056.md): TWiki allows arbitrary shell command execution via the Include function (no CVSS)
- [CVE-2013-4751](https://cve.now/CVE-2013-4751.md): php-symfony2-Validator has loss of information during serialization (no CVSS, symfony/validator · symfony/symfony)
- [CVE-2013-3718](https://cve.now/CVE-2013-3718.md): evince is missing a check on number of pages which can lead to a segmentation fault (no CVSS)
- [CVE-2013-2739](https://cve.now/CVE-2013-2739.md): MiniDLNA has heap-based buffer overflow (no CVSS)
- [CVE-2013-2738](https://cve.now/CVE-2013-2738.md): minidlna has SQL Injection that may allow retrieval of arbitrary files (no CVSS)
- [CVE-2013-2600](https://cve.now/CVE-2013-2600.md): MiniUPnPd has information disclosure use of snprintf() (no CVSS)
- [CVE-2019-18636](https://cve.now/CVE-2019-18636.md): A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2019-16909](https://cve.now/CVE-2019-16909.md): An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14\_J8 for Jira. (no CVSS)
- [CVE-2019-16908](https://cve.now/CVE-2019-16908.md): An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14\_J8 for Jira. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.